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1. A medical data base supervisory control system comprising: 

(a) at least one data base including medical data 
individually relating to each of a plurality of patients, 

(b) means including interconnected computers for requesting 
and accessing said medical data, 

(c) means for identifying medical data for each of said 
patients with conditions required for accessing .said medical 
data, and 

(d) data processing means responsive to a request for 
patient medical data for comparing said request .with said 
conditions required for access to said data and, when said 
request fails to comply with said conditions, for denying access 
to said data. 

2. A system of Claim 1 further including means for 
authenticating the identity of the requesting party. 

3. The system of Claim 2 further including means to prevent 
access to information concerning medical records by any party 
without the prior authorization of the patient about whom such 
records pertain. 

4. The system of Claim 1 further including means for 
tentatively identifying records fulfilling criteria specified in 
said request for medical data. 

5. The system of Claim 4 further including means for 
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authenticating identity of said patients. 

6. The system of Claim 1 wherein said means for requesting 
said medical data includes means for indicating what part of said 
records is desired. 

7. The system of Claim 1 wherein said means for requesting 
access to said medical records includes means for indicating the 
reason said records are being requested. 

8. The system of Claim 1 further including means for 
identifying records fulfilling said request with data symbolic of 
patient identity. 

9. The system of Claim 8 wherein said means for identifying 
records fulfilling said request further include data symbolic of 
medical symptoms or reason for patient visit. 

10. The system of Claim 8 wherein said means for identifying 
records fulfilling said request further include data symbolic of 
types of diagnostic tests performed. 

11. The system of Claim 10 wherein said means for 
identifying records fulfilling said request further include data 
symbolic of the attributes, levels or findings indicated within 
said diagnostic tests. 

12. The system of Claim 8 wherein said means for identifying 
records fulfilling said request further include data symbolic of 
modes of treatment or medical services rendered. 

13. The system of Claim 8 wherein said means used for 
identifying records fulfilling said request further include data 
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symbolic of any ancillary services rendered. 

14. The system of Claim 8 wherein said means used for 
identifying records fulfilling said request further include data 
symbolic of attending physician identity. 

15. The system of Claim 8 wherein said means for identifying 
records fulfilling such request further include data symbolic of 
date of care. 

16. The system of Claim 1 wherein said means for requesting 
and accessing said medical data includes means for indicating a 
"standing order" that will automatically initiate an attempt to 
retrieve certain predetermined types of medical data under 
specific pre-specif ied circumstances. 

17. The system of Claim 1 wherein said conditions required 
for accessing said medical data includes an indication of the 
names of each of the parties who's permission must be obtained 
prior to the release of the medical data. 

18. The system of Claim 17 wherein said conditions required 
for accessing said medical data further includes an indication of 
the charge that will be assessed by the holder of such medical 
data for the part, or in the form, specified by the requesting 
party. 

19. The system of Claim 17 wherein said conditions for 
accessing said medical data includes means indicating the time 
following the receipt of all approvals that will be required for 
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the delivery of such medical data to the requesting party. 

20. The system of Claim 1 wherein said at least one data 
base includes a firewall limiting access to searching such data 
base solely to those parties who are authorized to do so. 

21. The system of Claim 1 wherein said means for identifying 
medical data fulfilling criteria specified in a request include 
means for producing an indicia of the degree to which patient 
data match said criteria specified in said request. 

22. The system of Claim 1 including means for a patient to 
grant permission for the release of his/her medical data. 

23. The system of Claim 22 wherein said at least one data 
base includes billing means^having access to said medical data. 

24. The system of Claim 22 wherein said means for a patient 
to grant permission includes data symbolic of the identity of 
said patient and data symbolic of the preferred means for 
contacting said patient to request access to and release of said 
patient's medical data. 

25. The system of Claim 23 wherein said means for a patient 
to grant permission includes data symbolic of rules to be 
followed in the event time elapses before such permission is 
granted in the case of predetermined types of requests for said 
medical data. 

26. The system of Claim 1 further including means for 
identifying the party requesting access to said medical data. 

27. The system of Claim 26 further including means for 
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authenticating the identity of each party having right of 
approval for release of said medical data. 

28. The system of Claim 27 further including means for 
producing an indicia that all required approvals for the release 
of said medical data have been secured. 

29. The system of Claim 28 further including means for 
producing an indicia of the required approvals for the release of 
said medical data that have not been secured or that have been 
specifically declined. 

30. The system of Claim 20 further including data index 
means and on-line memory cache means for physically disconnecting 
said at least one data base from said data index means, online 
memory cache means and all other outside parties except during 
batch process of uploading pre-designated and fully-approved 
requests for medical data. 

31. The system of Claim 30 further including interface 
engine means enabling a search agent means to index said at least 
one data base of medical data. 

32. The system of Claim 1 further including means for 
billing said requesting party for a charge related to access to 
the medical data. 

33. The system of Claim 1 further including online memory 
cache means and means for delivering medical data to a requesting 
party including means for transmitting requested medical data 
held in digital form to said online memory cache means. 
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34. The system of Claim 33 wherein said online memory cache 
means includes a firewall limiting access to said memory cache 
means exclusively to authorized users . 

35. The system of Claim 33 further including means for 
producing an indicia that said requested medical data have been 
received in said online memory cache means and are being held 
there for download by said requesting party. 

36. The system of Claim 34 further including means for said 
requesting party to enter through said firewall and download said 
medical data from said memory cache means. 

37. The system of Claim 1 including means for delivering 
medical data to a requesting party. 

38. The system of Claim 37 further including means for 
informing said requesting party when medical data is in a non- 
digital form arid the mode of available delivery. 

39. The system of Claim 1 further including means for 
encrypting all communications within the system. 

40. The system of Claim 1 further including security log 
means for retaining an audit trail with regard to all of the 
communications within said system. 

41. The system of Claim 1 further including public 
portions , and comprising means for allowing parties to advertise 
in said public portions of said system 

42. A method of controlling access to medical data in a 
medical data base comprising: 
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(a) maintaining at least one data base including medical 
data individually relating to each of a plurality of patients, 

(b) identifying medical data for each of said patients with 
indicia indicative of conditions required for access to said 
medical data, 

(c) selectively introducing requests for access to said data 
through an interconnected computer input terminal, 

(d) comparing said requests with said conditions; and, when 
said requests fail to comply with said conditions, automatically 
denying access to said data. 

43. The method of Claim 42 further including a step of 
authenticating identities of parties making said requests. 

44. The method of Claim 43 further includes the step of 
rejecting requests for information concerning medical records by 
any party without the prior authorization of the patient about 
whom such records pertain. 

45. The method of Claim 42 further including the step of 
tentatively identifying records fulfilling criteria specified in 
said requests for medical data. 

46. The method of Claim 45 further including a step of 
authenticating identities of said patients. 

47. The method of Claim 42 further including steps of 
requesting said medical data and indicating what part of said 
data is desired by said requesting party. 

48. The method of Claim 42 further including steps of 
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requesting access to said medical records and indicating a reason 
said records are being requested. 

49. The method of Claim 42 including a step of ensuring that 
records fulfilling said requests include data symbolic of patient 
identities . 

50. The method of Claim 49 wherein said step of identifying 
records fulfilling said requests further include data symbolic of 
medical symptoms or reason for patient visit. 

51. The method of Claim 49 wherein said step of identifying 
records fulfilling said requests further include data symbolic of 
types of diagnostic tests performed. 

52. The method of Claim 51 wherein said step of identifying 
records fulfilling said requests further include data symbolic of 
the attributes, levels or findings indicated within said 
diagnostic tests. 

53. The method of Claim 49 wherein said step of identifying 
records fulfilling said requests further include data symbolic of 
modes of treatment or medical services rendered. 

54. The method of Claim 49 wherein said step of identifying 
records fulfilling said requests further include data symbolic of 
the ancillary services rendered. 

55. The method of Claim 49 wherein said step of identifying 
records fulfilling said requests further include data symbolic of 
attending physician identity. 

56. The method of Claim 49 wherein said step of identifying 
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records fulfilling said requests further include data symbolic of 
date of care. 

57. The method of Claim 42 wherein said step of selectively 
introducing requests for access to said medical data includes a 
step of indicating a "standing order" that will automatically 
initiate an attempt to retrieve certain predetermined types of 
medical data under specific pre-specif ied circumstances. 

58. The method of Claim 42 wherein said conditions required 
for accessing said medical data include a step of indicating 
names of each party who's permission must be obtained prior to 
release of said medical data. 

59. The method of Claim 58 wherein said conditions required 
for accessing said medical data include an indication of the 
charge that will be assessed by the holder of such medical data 
for the part, or in the form, specified by the requesting party. 

60. The method of Claim 58 wherein said conditions for 
accessing said medical data include a step of indicating the time 
following the receipt of all approvals that will be required for 
the delivery of such medical data to the requesting party. 

61. The method of Claim 42 wherein maintaining said at least 
one data base includes maintaining a firewall limiting access to 
searching said data base solely to those parties who are 
authorized to do so. 

62. The method of Claim 42 further including providing a 
data index, and wherein identifying medical data fulfilling 
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criteria specified in a request includes a step of producing an 
indicia of the degree to which data listed in said data index 
match said criteria specified in said request. 

63. The method of Claim 42 including a step of providing for 
a patient to grant permission to release of such medical data. 

64. The method of Claim 63 wherein said step of identifying 
medical data includes a step of billing for access to said 
medical data. 

65. The method of Claim 63 wherein said step of providing 
for a patient to grant permission includes data symbolic of the 
identity of said patient and data symbolic of a preferred means 
for contacting said patient to request access to and to release 
of said patient's medical data. 

66. The method of Claim 64 wherein said step of providing 
for a patient to grant permission includes providing data 
symbolic of rules to be followed in the event time elapses before 
said permission is granted in the case of pre-determined types of 
requests for said medical data. 

67. The method of Claim 42 further including a step of 
identifying a party requesting access to said medical data. 

68. .The method of Claim 67 further including a step of 
authenticating identity of each party with a right of approval to 
release of said medical data. 

69. The method of Claim 68 further including a step of 
producing an indicia that all required approvals for release of 

-63- 



said medical data have been secured, 

70. The method of Claim 69 further including a step of 
producing an indicia of approvals required for release of said 
medical data that have not been secured, or that have been 
specifically declined. 

71. The method of Claim 61 further including steps of 
providing a data index and online memory cache, and physically 
disconnecting said at least one data base from said data index, 
said online memory cache and all other outside parties except 
during batch process of uploading pre-designated and fully- 
approved requests for medical data. 

72. The method of Claim 71 further including a step of 
providing an interface engine for search agent means to index 
said at least one data base of medical data. 

73. The method of Claim 42 further including a step of 
billing a requesting party for a charge related to delivery of 
medical data. 

74. The method of Claim 42 further including steps of 
providing an online memory cache and delivering medical data to • 
a requesting party and transmitting records in digital form to 
said online memory cache. 

75. The method of Claim 74 further including providing a 
firewall limiting access to said memory cache exclusively to 
authorized users. 

76. The method of Claim 74 further including a step of 
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producing an indicia that requested medical data have been 
received in said online memory cache and are being held there for 
download by a requesting party. 

77. The method of Claim 75 further including a step of 
permitting a properly credentialed requesting party to enter 
through said firewall and download said medical data from said 
memory cache. 

78. The method of Claim 42 including a step of delivering 
records to the requesting party. 

79. The method of Claim 78 further including a step of 
informing a requesting party when medical data is in a non- 
digital form and the mode of such delivery. 

80. The method of Claim 42 further including a step of 
encrypting selected communications within said system. 

81. The method of Claim 42 further including a step of 
creating a security log and retaining an audit trail with regard 
to all of the communications between parties using said system. 



-65- 



